CVE-2016-8399: Infoleak
A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capbilities could cause an out of bounds read by creating a smaller-than-expected ICMP header and sending to its destination via sendto().
Due to lack of size checking on ICMP header length, it is possible to cause out-of-bounds read on stack, this stack data may be included in the outgoing packet data if it can be validated (infoleak).
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0eab121ef8750a5c8637d51534d5e9143fb0633f
Other sources
An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler optimizations restrict access to the vulnerable code. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31349935.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8399?
The severity of CVE-2016-8399 is rated as Moderate.
How does CVE-2016-8399 affect Ubuntu Linux?
CVE-2016-8399 affects Ubuntu Linux versions 4.4.0-62.83, 4.8.0-37.39, and 4.9.
Which version of the Linux kernel is affected by CVE-2016-8399?
The Linux kernel versions up to and exclusive of 4.9 are affected by CVE-2016-8399.
How can the elevation of privilege vulnerability in the kernel networking subsystem be exploited?
The elevation of privilege vulnerability in the kernel networking subsystem can be exploited by a local malicious application to execute arbitrary code within the context of the kernel.
Are there any remediation steps available for CVE-2016-8399?
Yes, upgrading to Linux kernel version 4.9 or later can mitigate the vulnerability.